apiVersion: gateway.networking.k8s.io/v1
kind: Gateway
metadata:
  name: {{ taskserv.name }}
  namespace: {{ taskserv.namespace }}
  labels:
    app.kubernetes.io/name: {{ taskserv.name }}
    app.kubernetes.io/managed-by: provisioning
  annotations:
    lbipam.cilium.io/ips: "{{ taskserv.gateway_ip }}"
spec:
  gatewayClassName: cilium
  listeners:
    - name: http
      port: {{ taskserv.port }}
      protocol: HTTP
      allowedRoutes:
        namespaces:
          from: All
{% for l in taskserv.https_listeners %}
    - name: {{ l.name }}
      port: 443
      protocol: HTTPS
      hostname: {{ l.hostname }}
      allowedRoutes:
        namespaces:
          from: All
      tls:
        mode: Terminate
        certificateRefs:
          - group: ""
            kind: Secret
            name: {{ l.tls_secret }}
            namespace: {{ l.tls_namespace }}
{% endfor %}